Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          wGObC8Ryw5A5JQMTd/lVkrCU0DStUXjadJZGn6vwkqY=
Subject key identifier:   2F:3B:FB:BA:D2:A4:82:76:03:12:E5:2F:B3:84:2D:3E:8B:D6:A6:D0
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       018F885B4698F0045E38FCD5D19DC020C5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          0225
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: 27PpDzQzbfeKSXojc3bVSzhd9kkECwbl4RmyQem1JPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:46:98:f0:04:5e:38:fc:d5:d1:9d:c0:20:c5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=2f3bfbbad2a482760312e52fb3842d3e8bd6a6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:0f:59:b1:83:f2:4e:76:4c:46:47:a2:5e:
                    0c:02:17:15:07:22:b3:64:8c:33:aa:f7:a2:be:86:
                    a3:56:b7:d5:06:53:57:d5:27:53:eb:80:88:4e:45:
                    42:95:7e:a8:0b:07:04:d2:16:e8:81:62:cb:32:30:
                    a6:14:0e:b8:87:f3:9f:cf:68:00:90:a5:75:f4:6a:
                    53:ce:e3:7f:48:ca:55:55:57:07:f3:23:45:f6:59:
                    31:7c:63:73:f6:45:65:19:b0:01:aa:fd:80:8b:a6:
                    5c:a7:b2:4c:db:b7:80:ea:57:2a:af:43:e8:a2:28:
                    0d:e1:f0:59:58:18:60:dd:82:fa:32:4a:eb:ce:8c:
                    10:db:52:90:91:97:76:c5:96:79:96:f0:85:6b:7b:
                    7c:ee:35:37:2c:a4:89:34:94:8a:64:a0:f3:7a:3d:
                    da:14:51:00:ba:b0:e5:6b:5e:28:ea:76:c8:73:b1:
                    26:b2:7a:f1:57:52:cd:8c:d5:9f:2a:70:e4:c4:6d:
                    fa:7b:58:c8:09:6f:b9:66:69:d3:f6:39:5d:d1:d1:
                    c5:11:10:05:af:2a:55:58:a3:ca:52:dd:47:87:43:
                    d5:23:1a:8a:7c:44:9c:ab:c2:21:80:96:dc:b8:1d:
                    f5:12:fb:84:ff:a4:62:03:94:1a:39:dc:bd:29:9a:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3B:FB:BA:D2:A4:82:76:03:12:E5:2F:B3:84:2D:3E:8B:D6:A6:D0
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:40:a3:0c:38:ec:d7:b7:c4:6c:76:a5:75:60:b2:43:ac:
         6c:4b:28:4a:c2:52:21:68:1a:38:aa:73:bd:e3:91:04:5b:cb:
         40:8f:af:09:07:95:67:07:86:08:4e:ed:63:6e:67:91:ea:ce:
         b5:7c:ca:02:51:32:79:8a:3e:a4:e3:d3:b1:5d:34:a9:a4:c3:
         8f:f6:28:f1:f2:81:4c:33:08:91:5f:4a:3e:25:91:07:85:c9:
         92:38:b4:ef:7e:f2:9c:fc:cb:ea:b8:be:dd:b0:fc:ef:8c:a9:
         34:15:73:cb:ef:77:58:e4:8c:e1:0e:07:ed:e4:d4:aa:db:40:
         9b:8d:09:b3:bf:fa:e7:be:27:4b:22:79:95:05:bd:6d:51:16:
         ca:14:5f:fd:b2:4c:2e:05:fd:a2:59:5c:61:ea:59:e1:be:35:
         43:8f:79:41:b5:12:c4:9d:9f:fe:e9:32:c7:a2:df:4c:21:e7:
         5a:a8:85:fe:fc:db:95:b3:b7:86:09:3b:9a:a0:08:dc:2d:56:
         8f:4b:47:5a:2f:b3:d4:e4:ce:52:fa:04:a6:7a:13:d4:9b:ba:
         76:cd:60:79:9f:cd:7f:74:a2:3b:fd:16:e2:59:95:7a:2b:89:
         0e:0e:99:c4:88:24:ca:f1:57:96:23:0b:01:ab:f4:f9:63:21:
         a6:c2:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:17 2024 by rpki-client on console-ams.rpki-client.org